Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a246929f-7ce9-3fcb-bbb8-cfd4a7eb4285.roa
File:                     a246929f-7ce9-3fcb-bbb8-cfd4a7eb4285.roa (raw, json)
Hash identifier:          a1Be6sWLj4yx6kKBv9mtEZW2Hhqhn2K33o0TVmnLp3A=
Subject key identifier:   E7:E8:D5:87:B0:9B:33:EE:0C:DD:85:6B:57:3C:DA:82:40:B2:1E:A6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FB4EE5A349889BB6493AF85C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a246929f-7ce9-3fcb-bbb8-cfd4a7eb4285.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        15.149.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:ee:5a:34:98:89:bb:64:93:af:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=997ed30d-bdad-4133-aa00-2d96750cfe7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:7c:3a:75:67:31:a9:91:46:e0:79:4e:d8:
                    35:63:9b:97:7c:35:c9:8c:dc:51:93:61:15:f2:bf:
                    07:a7:b2:df:6d:b4:70:2d:90:78:ef:17:11:9b:6b:
                    40:f9:64:79:d3:1e:cf:63:6e:d6:b6:a4:4e:f7:cd:
                    17:a2:b8:64:e3:33:6c:09:39:4d:1e:f9:f6:1e:5c:
                    6c:bc:f7:9a:18:fb:49:10:93:c8:18:1f:27:f2:4e:
                    0f:d4:e3:84:3e:48:21:74:fd:99:39:f6:0a:b6:db:
                    42:0f:b5:f7:76:ed:c3:f2:fd:ef:4d:35:01:dc:66:
                    54:8c:9e:58:f1:e3:91:4d:22:72:21:5b:f8:e9:46:
                    87:ec:ee:8e:85:11:8b:4f:41:dd:25:c0:35:44:39:
                    80:42:77:6b:92:41:81:c1:7c:6b:99:e9:4f:c5:e9:
                    bd:42:98:d3:0a:29:17:e3:46:f0:8c:d2:f2:02:93:
                    39:44:92:39:49:59:24:21:66:54:b4:24:ab:e7:b5:
                    23:e9:de:2e:7f:69:4e:71:77:12:1b:8d:4e:4e:f8:
                    a4:73:d5:df:2b:32:55:1f:e5:c9:33:18:34:39:9c:
                    b6:76:29:17:0a:bc:6f:97:e2:57:b2:8f:03:21:24:
                    c0:2b:b0:e0:e4:39:7c:6f:a4:51:06:a7:9c:ef:b4:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:D5:87:B0:9B:33:EE:0C:DD:85:6B:57:3C:DA:82:40:B2:1E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a246929f-7ce9-3fcb-bbb8-cfd4a7eb4285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:cc:ae:c6:0f:e9:3e:59:ac:98:6b:d3:09:67:f4:60:60:
         4e:c4:d3:c3:8e:db:f2:c1:81:13:58:3d:8b:ba:e2:88:85:88:
         71:ac:37:73:bc:43:ce:e3:51:34:34:77:95:aa:05:a6:b6:f3:
         99:30:59:a7:88:44:75:01:89:e0:7f:46:15:c8:3c:48:e4:8c:
         c3:64:51:af:8f:93:e2:ca:79:81:ff:37:2e:34:d1:56:a4:2b:
         91:28:5d:0f:1c:e3:ac:d0:05:d0:15:e9:08:a6:50:c6:b9:f8:
         45:2c:e0:a2:bf:85:73:fc:b8:3d:d3:1a:c3:23:cf:05:46:b1:
         47:ec:37:56:0a:21:f7:92:33:28:d0:61:85:e0:0e:1a:67:11:
         95:a2:9b:77:a7:c2:49:32:67:23:05:ec:5f:f0:04:bf:78:aa:
         5a:fd:c8:5e:28:78:af:3a:ae:96:67:d2:ad:7e:27:69:40:85:
         86:50:fc:4f:83:70:5e:80:cd:94:26:4d:4b:bc:44:0e:c8:08:
         ae:8c:7d:d4:7f:29:39:aa:c3:9d:5a:ea:d7:32:91:fc:71:3e:
         63:af:20:57:ea:2b:aa:dd:99:5b:4c:c5:55:94:91:a8:ac:ad:
         82:e4:60:7d:13:52:94:d3:40:c4:1c:b8:d6:67:ac:f3:d0:9a:
         de:91:5b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:10 2025 by rpki-client